Featured Blogs

Quad9’s Planned Departure From France Shows Why Internet Infrastructure Policy Needs a Wider Lens

Quad9's planned withdrawal from France over DNS blocking orders highlights the tension between copyright enforcement and Internet security, raising questions about whether infrastructure-level restrictions impose consequences beyond their intended targets. more

Vulnerability Windows and Exposure Costs: Modeling the Effects of Stale Trust

A Verisign Labs framework quantifies how compromised certificates remain trusted when revocation information is stale, using vulnerability windows and exposure costs to compare security risks and measure the benefits of faster certificate status updates. more

Too Many Providers, More Moving Parts: The Challenge of SSL Certificate Fragmentation

Research into SSL certificates at Forbes Global 2000 companies reveals widespread provider fragmentation, raising operational concerns as certificate validity periods shorten to 100 days in March 2027. more

The Phishing Domain You Missed Shares a Nameserver With the One You Caught

Nameserver-based searches can uncover related domains that conventional phishing monitoring misses. An investigation of shared DNS infrastructure reveals how registration patterns, nameserver pairs and timely zone data can help identify suspicious domain clusters. more

CaribNOG SHIELD Aims to Build Caribbean Cybersecurity Capacity Through Local Training

CaribNOG's new SHIELD initiative aims to strengthen Caribbean Internet security through technical internships, routing security training and regional collaboration, with St Kitts and Nevis planning to introduce the programme in 2027. more

Third-Level .name Registrations and Email Forwarding to Be Discontinued in 2027

Verisign plans to discontinue third-level .name registrations and email forwarding in February 2027, prompting objections from longtime users concerned about losing established addresses, disrupting online accounts and potential security risks. more

Testing the Classifier: What a Blind Comparison Revealed About Domain Namespaces

A blind comparison of domain classification results found strong agreement for investor-pattern names but lower recall for operator-aligned names, raising questions about earlier namespace composition estimates and the limits of structural classification. more

Technology Advances That Could Transform the Broadband Industry

Research breakthroughs that highlight advances in semiconductor design, record-setting fiber transmission, light-based quantum computing and WiFi sensing, with potential implications for network performance, energy efficiency and privacy. more

The Domain Trust Badge: Making Anti-Abuse Work Visible

The Domain Trust Badge pilot introduces a voluntary framework for registries and registrars to demonstrate effective anti-abuse practices through 17 requirements, evidence-based validation and a new metric measuring abuse mitigation performance. more

Pakistan’s .PK Is Now DNSSEC-Signed, but Only One Domain Validates

Pakistan's .pk domain has gained DNSSEC protection, but an October 11 scan found just one fully validating domain among 158,561 examined. Another 1,230 signed domains lack the parent-zone records needed to establish trust. more

What ICANN’s Contention Sets Reveal About New gTLD Values

ICANN's Reveal Day list holds 263 contention sets. With private deals banned this round, any set that reaches an ICANN auction will end in a public price. The 2012 auctions show why the number of bidders is a weak guide to that price. more

ICANN’s New gTLD Round Draws 16 African Applications, 10 Controlled by a Chinese Business Network

A Seychelles company controlled by Lu Heng accounts for 10 of Africa's 16 new gTLD applications, linking ICANN's domain expansion to commercial interests and an ongoing dispute over AFRINIC's governance and IPv4 resources. more

Abolish The Public Suffix List

The Public Suffix List has become a critical dependency for web security despite inconsistent implementation, restrictive admission policies and limited maintenance resources. Its replacement would require coordinated standards development and greater domain operator control. more

The WiFi Dilemma: Why ISPs Get Blamed for Poor In-Home Connectivity

Poor in-home WiFi significantly increases broadband customer dissatisfaction and churn risk. New survey findings highlight the challenge ISPs face when customers blame providers for connectivity problems beyond their direct control. more

Unfolding Forensics of a Lawfare Train Wreck: The EU CRA

The EU Cyber Resilience Act faces mounting implementation challenges involving cybersecurity standards, vulnerability reporting, regulatory overlap and fundamental rights. The author argues that its expansive obligations risk undermining the regulation's effectiveness and enforceability. more